Privacy Policy

Effective Date: September 6, 2026

Harmonized Trades ("we," "our," "us") values your privacy. This Privacy Policy explains how we handle your information when you use our mobile application and related services ("Services").

1. Information We Collect

We believe in data minimization and only collect what's necessary to provide our Services. Below is a detailed breakdown of the data we collect:

Contact Information

• Email Address: Used for account recovery, customer support, and important notifications. We support Apple's "Hide My Email" feature for enhanced privacy.

Identifiers

• Authentication ID: A unique identifier provided by Auth0 (e.g., "auth0|abc123") used to securely authenticate your account. This is NOT your email or name.
• Device Identifier: Used by RevenueCat to restore purchases and keep your subscription attached to your account. Not used for advertising. Not used to track you across other companies’ apps or websites.
• Profile Picture URL: Optional. If you choose to set a profile picture, we store the URL to display it in the app.

Financial Information

• Trading Data: Your trade positions, profit/loss calculations, trade notes, strategies, and categories that you manually enter or sync from connected brokerage accounts.
• Brokerage Account Information: If you choose to connect a Schwab account, we store:
  • Account numbers (encrypted)
  • Account type and name
  • OAuth tokens (securely stored and regularly refreshed)
  • Transaction history you choose to sync
  Important: We access this data via OAuth with your explicit consent. You can disconnect your brokerage account at any time.

Purchases

• Subscription Status: We track your subscription tier (Free, Basic, or Pro) to provide appropriate app features. Payment processing is handled securely by Apple App Store, Google Play, and RevenueCat. We never see or store your credit card information.

Usage Data

• Analytics: Basic app usage patterns to improve performance and user experience (e.g., which features are used, crash reports, error logs).
• App Settings: Your preferences such as theme, grouping options, and chat AI tier.
• Login Activity: Last login timestamp for security purposes.

What We DO NOT Collect

• ❌ Your name (first name, last name)
• ❌ Username or nickname
• ❌ Phone number
• ❌ Physical mailing address or precise GPS location data
• ❌ Contacts, photos, or other device data
• ❌ Browsing or search history outside the app
• ❌ Payment information (handled by Apple/Google/RevenueCat)

Plans, AI chat, and what the output is not

Free and Basic use the same journal analytics on our servers: search and exact P/L math from your trades. Pro adds a language model (OpenAI GPT-4o mini) that can explain and compare those trades. It does not do the arithmetic. Education Mode on every tier can send the question you type to OpenAI to explain trading concepts; it does not send your portfolio.

AI output is not investment advice. Harmonized Trades does not provide recommendations, signals, or buy/sell/hold opinions. All analysis is informational and educational only.

2. How We Use Your Information

We use the data we collect for the following purposes:

• Account Management: Authenticate your login, maintain your account, and enable account recovery
• App Functionality: Store and display your trades, sync with brokerage accounts, provide AI-powered insights
• Subscription Management: Track your subscription status and provide tier-appropriate features
• Customer Support: Respond to your questions and resolve technical issues
• Analytics: Improve app performance, fix bugs, and understand feature usage
• Security: Detect and prevent fraud, abuse, and unauthorized access

We do NOT use your data for:

• ❌ Advertising or marketing to third parties
• ❌ Tracking your behavior across other apps or websites
• ❌ Selling or renting your information

3. Third-Party Services

We use the following trusted third-party services to provide our app functionality:

• Auth0: Authentication and secure login. Auth0 processes your email and authentication credentials. Auth0 Privacy Policy
• RevenueCat: Subscription management and in-app purchases. RevenueCat Privacy Policy
• Charles Schwab: If you choose to connect a Schwab account, we use Schwab's OAuth API to access your trading data with your explicit consent. Schwab Privacy Policy
• OpenAI. We use OpenAI’s API Platform (not the consumer ChatGPT product) to power Education Mode on every tier and, on Pro, to generate natural-language explanations of your trades. Education Mode sends the question you type. Pro chat may also send a relevant subset of your trade records (for example ticker, dates, P/L, notes, strategies) with the question. Free and Basic portfolio chat (win rate, totals, search) is computed on our servers and is not sent to OpenAI.

OpenAI’s Services Agreement (effective January 1, 2026) states: “OpenAI will only use Customer Content as necessary to provide Customer with the Services, comply with applicable law, enforce the OpenAI Policies, and prevent abuse. OpenAI will not use Customer Content to develop or improve the Services, unless Customer explicitly agrees to such use.”

OpenAI’s API documentation states: “As of March 1, 2023, data sent to the OpenAI API is not used to train or improve OpenAI models (unless you explicitly opt in to share data with us).” For the Chat Completions endpoint we use, OpenAI lists training as “No.”

OpenAI’s API documentation further states: “By default, abuse monitoring logs are generated for all API feature usage and retained for up to 30 days, unless longer retention is required by law, or is reasonably necessary to protect our services or any third party from harm.” We have not enabled OpenAI’s Zero Data Retention option.

OpenAI’s privacy policy: https://openai.com/policies/privacy-policy. Services Agreement: https://openai.com/policies/services-agreement. Data handling documentation: https://developers.openai.com/api/docs/guides/your-data.

Important: These services have their own privacy policies. We only share the minimum data necessary for them to function.

4. Data Sharing

We do not and will never sell your personal information to any third party.

We only share your information in these limited circumstances:

• With Your Consent: When you explicitly authorize connection to a brokerage account (e.g., Schwab OAuth)
• Service Providers: With trusted third-party services listed above, only to provide app functionality
• Legal Requirements: If required by law, court order, or government regulation
• Security: To protect against fraud, abuse, or threats to user safety

We do not sell your personal information.

5. Data Security

We implement industry-standard security measures to protect your information:

• Secure Token Storage: Authentication tokens are stored using iOS Keychain and Android Keystore - the most secure storage available on mobile devices
• Encrypted Connections: All data transmitted between your device and our servers uses TLS/SSL encryption
• Encrypted Database: Your data is stored in encrypted databases with access controls
• OAuth Security: Brokerage connections use industry-standard OAuth 2.0 with token refresh and expiration
• Data Minimization: We only store what's necessary to provide app functionality
• Regular Security Audits: We regularly review our security practices and update as needed
• No Password Storage: We use Auth0 for authentication - we never store your password

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

You have control over your data:

• Access: You can view all your data within the app at any time
• Edit: You can modify your trades, settings, and preferences
• Delete: You can delete individual trades or disconnect brokerage accounts
• Account Deletion: You can permanently delete your account and all associated data directly from the Settings screen in the app, or contact us via email if you're unable to access the app
• Export: Request a copy of your data by contacting support
• Opt-Out: You can disconnect any third-party integrations at any time

If you're in the EU, you have additional rights under GDPR including the right to data portability and the right to object to processing.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services:

• Active Accounts: Data is retained while your account is active
• Deleted Accounts: After account deletion, we permanently delete your data within 30 days
• Legal Requirements: Some data may be retained longer if required by law
• Brokerage Tokens: OAuth tokens expire automatically and are refreshed/deleted as needed

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

9. Children's Privacy

We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided personal information, please contact us immediately so we can delete it.

10. California Privacy Rights (CCPA)

If you're a California resident, you have additional rights:

• Right to know what personal information we collect
• Right to delete your personal information
• Right to opt-out of sale of personal information (we don't sell your data)
• Right to non-discrimination for exercising your rights

Contact us to exercise these rights.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Updating the "Effective Date" at the top of this policy
• Posting a notice in the app
• Sending an email notification for significant changes

Your continued use of the app after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

• Email: support@harmonizedtrades.com
• Subject Line: Privacy Inquiry

We will respond to privacy-related requests within 30 days.